Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233342e302f32332d3234203d3e2037303239.roa
File:                     3231362e39372e3233342e302f32332d3234203d3e2037303239.roa (raw, json)
Hash identifier:          zh1jKWfOzf21ilractwceIwCP72WL+ZhGbFUg/1AKro=
Subject key identifier:   B7:92:27:88:16:61:AA:13:BA:51:7E:88:C6:A5:13:31:C5:D1:B0:9F
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       1364D9F9635EC54D930F63FC1B9AD3E4379FA277
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233342e302f32332d3234203d3e2037303239.roa
Signing time:             Mon 25 Oct 2021 12:57:28 +0000
ROA not before:           Mon 25 Oct 2021 12:52:28 +0000
ROA not after:            Mon 24 Oct 2022 12:57:28 +0000
asID:                     7029
IP address blocks:        216.97.234.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:64:d9:f9:63:5e:c5:4d:93:0f:63:fc:1b:9a:d3:e4:37:9f:a2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:52:28 2021 GMT
            Not After : Oct 24 12:57:28 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:24:6f:ec:db:31:5a:68:9f:5c:70:85:f8:
                    b4:40:99:d0:d0:14:46:cf:06:fe:33:2b:84:3d:0c:
                    b8:aa:29:f0:2b:61:40:db:4d:d8:f6:ae:ac:31:ba:
                    6a:c3:99:ab:11:30:36:01:b0:6f:c3:b4:f7:72:d2:
                    75:89:18:9e:5d:53:73:bb:5a:e9:5f:04:f5:8e:fa:
                    18:fb:12:69:60:8d:1e:7d:2f:14:2a:00:5b:61:42:
                    2a:7a:20:39:91:31:05:74:3a:12:4e:bf:0d:62:f5:
                    c2:a3:53:f4:cf:ff:34:79:c3:d6:96:57:c6:78:11:
                    02:10:19:c8:8d:3f:a2:60:52:c8:41:3e:51:3c:a9:
                    41:67:4b:56:26:83:56:32:41:ee:ed:17:8c:e9:64:
                    99:15:6f:78:59:38:f4:e2:0c:3c:73:fe:15:a0:13:
                    fb:cc:13:cc:04:a4:1e:17:b9:f0:db:19:7c:63:e7:
                    70:57:bf:30:f9:23:55:4b:cf:1d:99:6d:c1:eb:8b:
                    c2:b4:0b:81:13:0b:83:bf:71:42:d0:ff:cc:10:3f:
                    15:c9:51:ac:b7:62:84:ac:f8:db:d4:8b:1f:9e:2a:
                    e8:3a:3d:ac:de:a9:df:c6:5c:08:e8:31:c0:e1:11:
                    da:d7:c4:5e:2e:59:24:e8:c7:8a:b7:df:85:c6:26:
                    cc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:92:27:88:16:61:AA:13:BA:51:7E:88:C6:A5:13:31:C5:D1:B0:9F
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233342e302f32332d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:f5:21:f1:5a:d8:e2:7a:46:99:fd:d3:a5:d2:1f:01:65:23:
         08:2a:64:e9:2e:55:9f:47:c1:00:01:35:33:4c:9d:c5:54:01:
         a8:b0:14:01:f9:e4:ea:26:ad:ea:b3:f0:1c:d3:df:70:07:33:
         3a:88:9d:1e:97:54:4c:3d:10:4d:00:be:13:53:29:64:9c:f2:
         0a:3a:be:83:fe:6d:4f:44:31:ee:45:fc:b0:0e:98:5e:8e:53:
         10:fe:21:d0:fb:82:49:02:5a:95:cf:78:7c:2f:45:96:bc:1e:
         fb:68:e9:c1:56:a7:7a:6a:b8:64:a1:4c:3e:88:8d:6d:ed:11:
         e8:6b:c4:eb:b4:58:af:7b:b6:f4:95:ad:2c:4f:ef:fc:07:f2:
         69:93:4a:9a:96:8f:80:59:31:e8:a0:8d:9f:94:62:8e:b9:27:
         57:01:bf:ea:57:25:e9:55:2f:27:9b:90:15:1e:91:e1:ac:44:
         06:43:08:16:d6:5e:c6:1f:b5:8d:7b:4e:cd:4f:ac:31:6b:fb:
         d0:24:35:36:07:0f:04:56:94:72:cd:f9:a1:cb:c2:ff:46:41:
         e6:02:bf:66:01:12:46:fe:8f:4c:2c:04:f4:77:7f:f3:d8:07:
         07:a2:51:0c:48:b0:dd:fe:60:bc:08:12:fd:b9:87:f6:24:98:
         b1:de:33:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org